CVE-2026-40468 Heap buffer overflow in gawk
LowCVSS 2.1
EPSS 0.20%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| azure linux gawk(Azure Linux:3.0) | < 5.2.2-2 | 5.2.2-2 |
| GNU gawk | <= 5.4.0 | No fix listed |
| redhat/gawk(Red Hat:enterprise_linux:10.2) | < 5.3.0-6.el10_2.1 | 5.3.0-6.el10_2.1 |
| redhat/gawk(Red Hat:enterprise_linux:8) | < 4.2.1-5.el8_10 | 4.2.1-5.el8_10 |
| redhat/gawk(Red Hat:enterprise_linux:9) | < 5.1.0-6.el9_8.1 | 5.1.0-6.el9_8.1 |
| redhat/openshift/ose-rhel-coreos(Red Hat:openshift:4.22::el9) | < 9:4.22.9.8.202610241758-0 | 9:4.22.9.8.202610241758-0 |
| redhat/costmanagement/costmanagement-ui-rhel10:1791460851(Red Hat:cost_management_on_premise:1::el10) | All versions | No fix listed |
| redhat/gawk-main(Red Hat:hummingbird:1) | < 5.4.0-3.1.hum1 | 5.4.0-3.1.hum1 |
| redhat/gawk-main(Red Hat:hummingbird:1) | < 5.4.1-1.hum1 | 5.4.1-1.hum1 |
| redhat/rhui5/cds-kubernetes-rhel9:1791978534(Red Hat:rhui:5::el9) | All versions | No fix listed |
| redhat/rhui5/cds-rhel9:1791978528(Red Hat:rhui:5::el9) | All versions | No fix listed |
| redhat/rhui5/haproxy-rhel9:1791978528(Red Hat:rhui:5::el9) | All versions | No fix listed |
| redhat/rhui5/installer-rhel9:1791964013(Red Hat:rhui:5::el9) | All versions | No fix listed |
| redhat/rhui5/rhua-rhel9:1791978693(Red Hat:rhui:5::el9) | All versions | No fix listed |
| redhat/gawk(Red Hat:rhel_els:6) | All versions | No fix listed |
| redhat/gawk(Red Hat:rhel_els:7) | All versions | No fix listed |
| redhat/openshift/ose-rhel-coreos-8(Red Hat:openshift:4) | All versions | No fix listed |
| redhat/openshift/ose-rhel-coreos-9(Red Hat:openshift:5) | All versions | No fix listed |
| debian/gawk(Debian:12) | All versions | No fix listed |
| debian/gawk(Debian:12) | = 1:5.2.1-2 | No fix listed |
| debian/gawk(Debian:12) | = 1:5.3.2-1 | No fix listed |
| debian/gawk(Debian:13) | All versions | No fix listed |
| debian/gawk(Debian:13) | = 1:5.2.1-2 | No fix listed |
| debian/gawk(Debian:13) | = 1:5.3.2-1 | No fix listed |
| debian/gawk(Debian:14) | All versions | No fix listed |
Show 6 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/gawk(Debian:14) | = 1:5.2.1-2 | No fix listed |
| debian/gawk(Debian:14) | = 1:5.3.2-1 | No fix listed |
| ubuntu/gawk(Ubuntu:22.04) | < 1:5.1.0-1ubuntu0.2 | 1:5.1.0-1ubuntu0.2 |
| ubuntu/gawk(Ubuntu:24.04) | < 1:5.2.1-2ubuntu0.1 | 1:5.2.1-2ubuntu0.1 |
| ubuntu/gawk(Ubuntu:26.04) | < 1:5.3.2-1ubuntu1.1 | 1:5.3.2-1ubuntu1.1 |
| fossies gawk | <= 5.4.0 | No fix listed |
References
- MSRC Security Update Guide vendor-advisory
- CBL-Mariner Releases vendor-advisory
- cgit.git.savannah.gnu.org patch
- cert.pl third-party-advisory
- Red Hat CVE page mitigation vendor-advisory
- RHSA-2026:73429 patch vendor-advisory
- RHSA-2026:73511 patch vendor-advisory
- RHSA-2026:73512 patch vendor-advisory
- RHSA-2026:89197 patch vendor-advisory
- RHSA-2026:79357 patch vendor-advisory
- RHSA-2026:40041 patch vendor-advisory
- RHSA-2026:49661 patch vendor-advisory
- RHSA-2026:82939 patch vendor-advisory
- Red Hat Bugzilla 2499655 issue-tracking
- www.cve.org
- nvd.nist.gov
- Debian Security Tracker CVE-2026-40468 vendor-advisory
- Ubuntu CVE tracker vendor-advisory
- USN-8588-1 vendor-advisory
- bugs.debian.org issue-tracking